Juniper EX9200 Series, Features Manual

Page: 71 / 278

Table 7: Two-Color Policer Configuration and Application Overview (continued)
Key Points Layer 3 Application Policer Configuration
Physical Interface Policer
Defines traffic rate limiting that applies to all logical interfaces and protocol families configured on a physical interface, even if
the interfaces belong to different routing instances. Can be applied as a firewall filter policer referenced from a physical interface
filter only.
Policer configuration:
Apply as a firewall filter policer referenced from a
physical interface filter that you apply at the
protocol family level:
[edit firewall]
Physical interface policer configuration:
[edit firewall]
policer policer-name {
physical-interface-policer ;
if-exceeding {
• Include the
physical-interface-policer
statement.
family family-name {
Firewall filter configuration:
bandwidth-limit bps;
burst-size-limit bytes;
filter filter-name {
physical-interface-filter ;
• Include the
physical-interface-filter
statement.
}
then {
discard;
from {
... match-conditions ...
}
forwarding-class class-name;
then { Application:
loss-priority supported-value;
}
policer policer-name;
}
•
Apply the filter to the input or
output of a logical interface
at the protocol family level.
}
}
}
[edit interfaces] Firewall filter policer verification:
interface-name {
•
Use the show interfaces
(detail | extensive)
operational mode command.
unit number {
family family-name {
filter {
input filter-name;
•
Use the show firewall filter
filter-name operational mode
command.
output filter-name;
}
... protocol-configuration ...
}
}
}
Related
Documentation
•
Basic Single-Rate Two-Color Policers on page 55
•
Bandwidth Policers on page 75
•
Filter-Specific Counters and Policers on page 85
•
Prefix-Specific Counting and Policing Actions on page 97
•
Multifield Classification on page 115
•
Policer Overhead to Account for Rate Shaping in the Traffic Manager on page 135
•
Two-Color and Three-Color Physical Interface Policers on page 185
53 Copyright © 2016, Juniper Networks, Inc.
Part 3: Configuring Two-Color Traffic Policers at Layer 3